Subprocessors
A subprocessor is a third party we use to process Customer Personal Data on behalf of our customers. This page lists every subprocessor that may process Customer Personal Data in connection with the #GoFile software, what they do for us, and where they process it. It forms part of our Data Processing Agreement.
Current subprocessors
| Subprocessor | What they do for us | Data they may process | Location |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Hosting of the #GoFile software, its database, uploaded documents and backups. Email delivery where system emails contain Customer Personal Data. | Customer Personal Data stored in or transmitted by the Software. | United Kingdom (London) for the software, database, uploaded documents and backups. Ireland for email delivery. |
| Cloudflare, Inc. | Content delivery network, DNS, web application firewall, DDoS protection and TLS termination for the Software. | Web traffic, IP addresses and Customer Personal Data transmitted through the Software while in transit. | Global edge network. |
| Google Cloud EMEA Limited (Google Workspace) | Support and business email. | Customer Personal Data only where you include it in a support message or attachment sent to us by email. | EU and other locations described in Google’s data processing terms. |
Other service providers
We also use providers including Stripe, Google reCAPTCHA and Google Ads to operate #GoFile, process payments and measure advertising. They do not process Customer Personal Data as our subprocessors under the Data Processing Agreement and are described in our Privacy Policy.
Recipients that are not subprocessors
The following organisations receive data only because you instruct us to send it. They act as independent controllers under their own privacy notices.
- HM Revenue & Customs (HMRC) – receives the returns, updates and submissions you ask us to file, together with the fraud prevention header data HMRC requires by law.
- Companies House – receives the company information and filings you ask us to submit, and supplies public register data we display to you.
International transfers
The Software’s database, uploaded documents and backups are hosted in the United Kingdom. Data is delivered to customers wherever they access the service. Where a subprocessor above processes data outside the UK, we rely on the UK Government’s adequacy regulations, the UK Extension to the EU-US Data Privacy Framework for certified providers, or the International Data Transfer Agreement or Addendum approved by the Information Commissioner, together with that provider’s own data processing terms.
Changes to this list
We inform customers by email or through the Software of intended additions or replacements of subprocessors before the change takes effect, giving them an opportunity to object, and update this page accordingly. If you object to a new subprocessor on reasonable data protection grounds and we cannot resolve your concern, you may close your account as described in our Data Processing Agreement.